Just to make it obvious, the problem with 'cgiwrap' is as follows: Suppose you have files you do not intend to publish. They are visible to users on the local machine, but not over the web. If I can see those files, I can write a 'cgiwrap' compliant program that allows a third party on the web to read your files. Under EROS/KeyKOS it is possible to impose finer control over who can see what. shap